This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft File: AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft (raw, json) Hash identifier: GPEmSwRLjPIE5483STb0WWv37Nft87hmhIp4Tit9BKA= Subject key identifier: 2D:9E:24:F7:46:D5:F0:51:FA:E7:49:0B:5E:E2:26:D5:36:22:BE:00 Authority key identifier: AE:40:02:B7:E9:2A:F5:9C:76:E7:F8:BE:4B:34:91:93:F0:54:81:B1 Certificate issuer: /CN=AE4002B7E92AF59C76E7F8BE4B349193F05481B1 Certificate serial: 17396D1EB4E5554B9C033E9DC0D143C76C5F9C27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft Manifest number: 0199 Signing time: Fri 05 Dec 2025 22:12:11 +0000 Manifest this update: Fri 05 Dec 2025 22:07:11 +0000 Manifest next update: Tue 09 Dec 2025 07:19:11 +0000 Files and hashes: 1: AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl (hash: h8RrINv3Yj9gVQXs9zWIvn+RigE2g21MBm1BJ4IWjfI=) 2: 3130332e3135392e36322e302f32332d3233203d3e20313431353931.roa (hash: HdUQMZ7SOKpAyFz6JesRqd55RtIwIZs1nM/RQd+kRrc=) 3: 3130332e3135392e36322e302f32342d3234203d3e20313431353931.roa (hash: Ss0eIh55eF1+18NBRc56XTthBY2pyra5MKG9X4X5KfE=) 4: 3130332e3135392e36332e302f32342d3234203d3e20313431353931.roa (hash: jZdzzwUnE5NySNtgaEjKcLOBnZGLd0OeUfLgUNjS8h8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Dec 2025 07:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:39:6d:1e:b4:e5:55:4b:9c:03:3e:9d:c0:d1:43:c7:6c:5f:9c:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE4002B7E92AF59C76E7F8BE4B349193F05481B1 Validity Not Before: Dec 5 22:07:11 2025 GMT Not After : Dec 9 07:19:11 2025 GMT Subject: CN=2D9E24F746D5F051FAE7490B5EE226D53622BE00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ae:b0:14:be:c5:a4:0a:80:f7:b8:88:a1:36: 20:59:58:b3:fe:6a:37:7b:01:85:4c:75:0b:ab:5f: 02:76:5d:e9:e8:57:f5:ce:51:36:f8:4f:d7:b0:6d: 29:90:86:d2:43:d2:93:0c:b8:9c:56:80:6d:0e:30: 3c:f3:37:f5:28:8f:72:58:52:5a:18:3d:39:53:f8: b9:1e:dd:4a:df:dc:bb:cb:72:f5:50:8c:56:3e:df: 86:78:31:e4:b0:b0:7e:fd:ee:de:dd:f5:e6:3b:cf: 55:20:e7:db:5a:c0:32:27:e3:c9:41:43:83:4c:33: dd:36:3a:c2:c7:56:4b:38:ce:de:8c:4b:47:1e:2a: 91:91:90:07:e4:be:b6:af:f1:dc:1e:d6:48:1f:c8: 56:0b:d2:03:6f:c7:aa:bf:76:dd:9b:27:36:dc:38: 4d:de:df:1e:9f:44:3e:4c:2a:56:b8:c6:ab:06:67: e1:d0:ad:a6:77:cb:df:f8:9a:b8:98:eb:77:c6:0d: cb:67:ac:65:96:e9:2e:98:27:0a:e1:e0:e2:f6:36: d2:9f:dc:9a:53:a6:9b:fb:ca:3e:b9:5b:88:7f:a9: 6f:6f:68:c1:72:6d:38:60:48:fb:cf:7b:9c:d4:43: 29:7f:4b:f9:b5:78:00:c3:21:f1:43:df:a0:bf:05: 35:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:9E:24:F7:46:D5:F0:51:FA:E7:49:0B:5E:E2:26:D5:36:22:BE:00 X509v3 Authority Key Identifier: keyid:AE:40:02:B7:E9:2A:F5:9C:76:E7:F8:BE:4B:34:91:93:F0:54:81:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20c171f4-bd11-48ed-87f0-27ea1209064f/0/AE4002B7E92AF59C76E7F8BE4B349193F05481B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:40:6a:3e:43:ab:bc:35:0a:4b:d9:4d:9b:d7:31:6a:65:5d: a5:0d:6b:83:1a:ad:ca:38:04:10:78:58:9d:a7:4c:55:f3:7e: c5:80:47:d4:f8:b1:ec:c7:ac:24:f0:fd:40:ac:e8:9d:5e:33: eb:e3:6c:20:f8:1e:53:52:b8:ea:ac:e7:a5:3c:73:15:34:08: c4:89:58:0d:f6:6d:9c:77:d5:ab:b3:0d:f4:7f:ba:a5:e6:e5: 1a:45:b1:7c:5b:7a:9c:03:41:2e:80:22:66:7d:7e:12:c2:ce: 9b:6f:06:f6:0f:4c:af:cf:10:e1:9a:81:ba:77:48:01:dd:ca: 91:f3:b6:a6:d1:62:d3:b4:9a:cd:01:20:11:c6:41:b5:70:b5: 6c:a2:56:2c:65:d1:8a:6d:fa:b4:a3:25:a3:4f:99:3f:d0:f1: 15:80:0a:cb:16:86:2b:81:4f:2c:3c:bc:15:19:69:4d:51:7c: 8e:ba:55:96:d2:8a:c1:ed:14:77:61:5e:89:10:98:10:70:11: ed:8a:cd:a3:83:55:17:33:ee:9b:dd:5e:02:81:ac:1c:6e:30: 68:70:60:dc:4b:3a:33:d5:61:77:e5:57:2c:d0:7f:bc:f3:d9: b6:db:d1:56:97:cd:e5:34:d8:5d:a3:aa:3d:45:b0:cd:90:32: 25:d4:c1:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFzltHrTlVUucAz6dwNFDx2xfnCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkxOTNG MDU0ODFCMTAeFw0yNTEyMDUyMjA3MTFaFw0yNTEyMDkwNzE5MTFaMDMxMTAvBgNV BAMTKDJEOUUyNEY3NDZENUYwNTFGQUU3NDkwQjVFRTIyNkQ1MzYyMkJFMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxrrAUvsWkCoD3uIihNiBZWLP+ ajd7AYVMdQurXwJ2XenoV/XOUTb4T9ewbSmQhtJD0pMMuJxWgG0OMDzzN/Uoj3JY UloYPTlT+Lke3Urf3LvLcvVQjFY+34Z4MeSwsH797t7d9eY7z1Ug59tawDIn48lB Q4NMM902OsLHVks4zt6MS0ceKpGRkAfkvrav8dwe1kgfyFYL0gNvx6q/dt2bJzbc OE3e3x6fRD5MKla4xqsGZ+HQraZ3y9/4mriY63fGDctnrGWW6S6YJwrh4OL2NtKf 3JpTppv7yj65W4h/qW9vaMFybThgSPvPe5zUQyl/S/m1eADDIfFD36C/BTVfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULZ4k90bV8FH650kLXuIm1TYivgAwHwYDVR0j BBgwFoAUrkACt+kq9Zx25/i+SzSRk/BUgbEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGMxNzFmNC1iZDExLTQ4ZWQtODdmMC0yN2VhMTIwOTA2NGYvMC9BRTQwMDJCN0U5 MkFGNTlDNzZFN0Y4QkU0QjM0OTE5M0YwNTQ4MUIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkxOTNGMDU0 ODFCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBjMTcxZjQtYmQxMS00OGVkLTg3 ZjAtMjdlYTEyMDkwNjRmLzAvQUU0MDAyQjdFOTJBRjU5Qzc2RTdGOEJFNEIzNDkx OTNGMDU0ODFCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBAaj5Dq7w1CkvZTZvXMWplXaUNa4Marco4 BBB4WJ2nTFXzfsWAR9T4sezHrCTw/UCs6J1eM+vjbCD4HlNSuOqs56U8cxU0CMSJ WA32bZx31auzDfR/uqXm5RpFsXxbepwDQS6AImZ9fhLCzptvBvYPTK/PEOGagbp3 SAHdypHztqbRYtO0ms0BIBHGQbVwtWyiVixl0Ypt+rSjJaNPmT/Q8RWACssWhiuB Tyw8vBUZaU1RfI66VZbSisHtFHdhXokQmBBwEe2KzaODVRcz7pvdXgKBrBxuMGhw YNxLOjPVYXflVyzQf7zz2bbb0VaXzeU02F2jqj1FsM2QMiXUweU= -----END CERTIFICATE-----Generated at Sun Dec 7 02:13:49 2025 by rpki-client